Privacy Policy for Flowers Worcester Park Customers

Introduction

This Privacy Policy outlines how Flowers Worcester Park (“we,” “us,” “our”) collects, processes, and retains personal data of customers placing orders from Worcester Park and surrounding districts. We are committed to upholding your privacy and complying with the General Data Protection Regulation (GDPR), ensuring the confidentiality and security of your data at every stage of processing.

Scope of This Policy

This policy applies to all information collected from individuals and businesses who purchase goods or services from Flowers Worcester Park within Worcester Park and neighboring districts. It covers all interactions whether online, by phone, or in person, and is applicable to all associated services offered by Flowers Worcester Park.

What Personal Data We Collect

Depending on the nature of your interaction with Flowers Worcester Park, we may collect the following types of information:

• Identity Data: Name, surname, and, where relevant, business name.
• Contact Data: Delivery address, billing address, phone number, and (if provided) email address.
• Order Information: Product details, order instructions, recipient information, and delivery notes.
• Payment Details: We process payment data solely as necessary to complete your transaction. Payment card details are handled securely and are not stored by us directly but by regulated payment service providers.
• Correspondence: Communications with our customer service, including any messages or feedback you provide.
• Technical Data: IP address, browser type, and information about how you use our website or services (collected through essential cookies or tracking tools for the operation and improvement of our services).

Lawful Basis for Data Processing

Flowers Worcester Park only processes personal data when permitted by law, specifically under the following lawful bases as defined by the GDPR:

• Contractual Necessity: Processing your personal data is necessary to fulfill orders you place, provide requested products or services, manage deliveries, and handle payment transactions.
• Legal Obligation: We may process your information to comply with legal requirements, such as maintaining records for tax and accounting purposes.
• Legitimate Interests: Where processing is required for our legitimate interests (such as ensuring the security of our website and services, or to improve customer experience), and only if these interests are not overridden by your individual rights and freedoms.
• Consent: In rare cases, we may process certain data based on your explicit consent, which you can withdraw at any time.

How We Use and Share Your Data

We use your data strictly to provide and improve our services, including processing and delivering your orders, responding to your queries, and fulfilling our contractual and legal obligations. We do not sell, rent, or trade your personal information to third parties.

In certain circumstances, we may share your data with selected third-party service providers (processors) who help us operate our business, such as:

• Payment Processors: To complete transactions securely, your payment details are handled by certified payment providers who ensure compliance with relevant security standards.
• Delivery Services: To ensure timely delivery of your orders, we may share relevant details (such as recipient name and address) with trusted local couriers or delivery personnel.
• Technology Providers: For maintaining our website, IT systems, and databases.
• Professional Advisors: Where legally necessary, for example, accountants or legal professionals for compliance and auditing purposes.

All processors are contractually bound to protect your data, use it only as instructed, and maintain its confidentiality and security. We do not permit processors to use your personal data for their own purposes.

Data Storage and Retention

Flowers Worcester Park retains your personal information only for as long as necessary to fulfill the purposes outlined in this policy and to satisfy legal, accounting, or reporting requirements. The retention periods are guided by the following principles:

• Order Information: Typically retained for up to 7 years to comply with statutory financial and tax regulations.
• Correspondence: Stored for up to 2 years from the date of your last interaction, unless required longer for dispute resolution or complaint handling.
• Technical Data: Typically stored in an anonymised or aggregated format and retained for shorter periods necessary for system security or troubleshooting.

After the relevant retention period, your data will be securely deleted or anonymised so that it can no longer be associated with you.

Your Data Protection Rights

As a customer of Flowers Worcester Park, you have the following rights under GDPR with regard to your personal data:

• The right to access: Request a copy of your personal data and information regarding how it is used.
• The right to rectification: Request corrections to inaccurate or incomplete data we hold about you.
• The right to erasure: Ask for your data to be deleted where there is no longer a legal or legitimate basis for us to retain it.
• The right to restrict processing: Request limitation of your data’s use in certain situations.
• The right to data portability: Receive your data in a structured, commonly used format and transfer it to another provider.
• The right to object: Object to processing of your data under certain conditions, including for direct marketing purposes.
• The right to withdraw consent: If the processing is based on your consent, you can withdraw it at any time.
• The right to complain: Raise a concern with the appropriate supervisory authority if you believe your data rights have been infringed.

Data Security

We take your privacy seriously and have implemented appropriate safeguards to protect your personal data against loss, misuse, unauthorised access, disclosure, alteration, and destruction. These measures include secure storage practices, regular review of processing activities, staff training, and contractual requirements for all third-party processors.

Policy Updates

This Privacy Policy may be updated from time to time to reflect changes in our practices, legal requirements, or the services we offer. Updates will be posted to ensure you are always aware of what data we collect and how we use it. We recommend that you review this policy periodically for the latest information regarding your privacy.

Contacting Us

If you have any queries about this Privacy Policy, or you wish to exercise your data protection rights, please contact us using the details provided on our official Flowers Worcester Park website or in-store.